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EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or additions be 
unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1 .3 12. To ensure 
consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with Mr. Bianco 
on 3/5/07. 

The following claims has been amended as follows: 
23 . A method for preserving the integrity of a negotiation conducted via a network, such as, th e 
Int e rn e t, and using clients and/or servers, among a plurality of parties each of whom is making a private 
' input during the negotiation and wherein a trusted entity acting as a center computers and outputs a value 
F of these inputs constituting the output of the negotiation comprising the steps of: 

a) providing an architecture which includes a center A, and a plurahty of participants B.sub. 1 , 
B.sub.2,..., B.sub.n, to engage in a negotiation during which all communications originating with a 
participant B.sub.i and transmitted to center A are exclusive; 

b) secretly generating an input x.sub.i by each participant B.sub.i; 

c) publishing by the center A to each participant a commitment to K combinatorial circuits that 
compute F, where K is a security parameter; 

d) transmitting by each participant B.sub.i to the center A a commitment c.sub.i to the value of 
B.sub.i's input x.sub.i, where c.sub.i is an encryption of x.sub.i; 

e) responsive to receipt of the commitments of the participants, publishing by the center A to the 
participants the commitments received; 

f) providing to each participant B.sub.i part of the K combinatorial circuits that the center A 
committed to, and requesting center A to open them, whereupon each participant B.sub.i can verify that 
the part of the circuits opened to participant B.sub.i computes a value F; 



Application/Control Number: 09/807,099 Page 3 

Art Unit: 2135 

g) transmitting by each participant B.sub.i to center A its input x.sub.i and decryption data to 
enable center A to verify that x.sub.i corresponds to the transmitted commitment c.sub.i; 

h) computing by center A a value of F based on the inputs x.sub.i it received by using a part of 
the K combinatorial circuits not disclosed to the participants, and publishing the computed value of F to 
the participants; and 

i) transmitting to all participants a proof that the computed value of F was computed correctly, 
which proof can be verified by each participant using the published commitments while preventing a 
coalition of any one subset of participants from learning (i) anything which cannot be computed just from 
the output of the K combinatorial circuits and from their own inputs, and (ii) information about the inputs 
of the other users. 

27. A method for preserving the integrity of a negotiation conducted via a network, such as, th e 
Int e rn e t, and using clients and/or servers, among a plurality of parties each of whom is making a private 
input during the negotiation and wherein a trusted entity acting as a center computers and outputs a value 
F of these inputs constituting the output of the negotiation comprising the steps of: 

a) announcing by center A that it will compute F; 

b) providing an architecture which includes a center A, and a plurality of participants B.sub.i, 
B.sub.2,. . ., B.sub.n, to engage in a negotiation during which all commimications originating with a 
participant B.sub.i and transmitted to center A are exclusive; 

c) constructing by center A K garbled circuits including gates having wire inputs and outputs that 
compute F; 

d) choosing by center A a permutation of each wire input of the circuits; 

e) publishing by center A to each participant B.sub.i tables of gates, and commitments to the 
permutations and the garbled values of the input wires; 
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f) secretly generating an input x.sub.i by each participant B.sub.i; 

g) transmitting to center A, for every input wire for every circuit corresponding to an input bit 
known to participant B.sub.i, a commitment of the permuted value of the input bit: 

h) responsive to receipt of the commitments of the participants, publishing by the center A to the 
participants the commitments received; 

i) selecting by each participant B.sub.i a subset of the K garbled circuits that the center A 
committed to: 

j) revealing by center A its commitments to the subset of the K garbled circuits, whereupon each 
participant B.sub.i can verify that the circuits revealed to participant B.sub.i computes value F; 
k) verifying by participants that test circuits compute F; 

1) transmitting by each participant B.sub.i to center A its input x.sub.i and decryption data to 
enable center A to verify that x.sub.i corresponds to the transmitted commitment in step g; 

m) computing by center A a value of F based on the inputs x.sub.i it received by using circuits not 
in the subset disclosed to the participants, and publishing the computed value of F to the participants; 

n) publishing by center A opened commitments and corresponding garbled inputs; and 

o) transmitting to all participants a proof that the computed value of F was computed correctly, 
which proof can be verified by each participant using the published opened commitments and 
corresponding garbled inputs while preventing a coalition of any one subset of participants from leaming 
(i) anything which cannot be computed just from the output of the K garbled circuits and from their own 
inputs, and (ii) information about the inputs of the other users. 



31. A method for preserving the integrity of a negotiation conducted via a network, such as, th e 
Int e rnet, and using clients and/or servers, among a plurality of parties each of whom is making a private 
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input during the transaction and wherein a trusted entity acting as a center computers and outputs a value 
F of these inputs constituting the output of the transaction comprising the steps of: . 

a) providing an architecture which includes a center A, and a plurality of participants B.sub.l, 
B.sub.2,..., B.sub.n, to engage in a transaction during which all communications originating with a 
participant B.sub.i and transmitted to center A are exclusive; 

b) secretly generating an input x.sub.i by each participant B.sub.i; 

c) publishing by the center A to each participant a commitment to K secure circuits that compute 
F, where K is a security parameter; 

d) transmitting by each participant B.sub.i to the center A a commitment c.sub.i to the value of 
B.sub.i's input x.sub.i, where c.sub.i is an encryption of x.sub.i; 

e) responsive to receipt of the commitments of the participants, publishing by the center A to the 
participants the commitments received; 

f) providing to each participant B.sub.i part of the K secure circuits that the center A committed 
to, and requesting center A to open them, whereupon each participant B.sub.i can verify that the part of 
the circuits opened to participant B.sub.i computes a value F; 

g) transmitting by each participant B.sub.i to center A its input x.sub.i and decryption data to 
enable center A to verify that x.sub.i corresponds to the transmitted commitment c.sub.i; 

h) computing by center A a value of F based on the inputs x.sub.i it received by using a part of 
the K secure circuits not disclosed to the participants, and publishing the computed value of F to the 
participants; and 

i) transmitting to all participants a proof that the computed value of F was computed correctly, 
which proof can be verified by each participant using the published commitments while preventing a 
coalition of any one subset of participants from learning (i) anything which cannot be computed just from 
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the output of the K secure circuits and from their own inputs, and (ii) information about the inputs of the 
other users. 



Any inquiry concerning this conmiunication or earfier communications from the examiner should 
be directed to HOSUK SONG whose telephone number is 5712723857. The examiner can normally be 
reached on mon-fii. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, KIM 
VU can be reached on 5712723859. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained 
from either Private PAIR or Public PAIR. Status information for unpublished applications is available 
through Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer 
Service Representative or access to the automated information system, call 800-786-9199 (IN USA OR 
CANADA) or 571-272-1000. 
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